Git-Mirrors/security-misc
1
0
Fork 0
mirror of https://github.com/Kicksecure/security-misc.git synced 2025-02-25 21:51:10 -05:00
Code Issues Packages Projects Releases Wiki Activity

comment

Browse Source
This commit is contained in:
Patrick Schleizer 2023-10-22 16:49:36 -04:00
parent 0e80acf38d
commit d521662d04
No known key found for this signature in database
GPG Key ID: CB8D50BB77BB3C48
1 changed files with 3 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
usr/bin/remount-secure
View File

@ -248,6 +248,9 @@ _lib() {
mount_folder="$NEWROOT/lib" mount_folder="$NEWROOT/lib"
## Cannot use noexec on /lib as per: ## Cannot use noexec on /lib as per:
## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25 ## https://forums.whonix.org/t/re-mount-home-and-other-with-noexec-and-nosuid-among-other-useful-mount-options-for-better-security/7707/25
## There are many executables in /lib. To check:
## sudo find /var/lib -type f -executable
## sudo find /var/lib -type f -executable ! -type l
intended_mount_options="nosuid,nodev" intended_mount_options="nosuid,nodev"
remount_secure remount_secure
} }